logo

Signal chat app clone used by Signalgate's Waltz was apparently an insecure mess

ID: b76468e4-e5b0-566f-9409-f35dcc00f18f

STIX ID: report--b76468e4-e5b0-566f-9409-f35dcc00f18f

Feed Name: The Register (Security)

Threat Score
70/100

Date Published: 2025-05-05

Date Updated: 2026-04-26

Author: Thomas Claburn

...
...

A reportedly compromised TeleMessage Signal-clone (TM-SGNL) used by senior US officials allegedly exposed unprotected chat logs; subsequent publication of the app's source code revealed hardcoded credentials and implementation choices that allow access to plaintext archived messages. TeleMessage suspended services and engaged external investigators while researchers highlighted potential license violations and broad security weaknesses in the app.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.